AWS::SecurityHub::ConfigurationPolicy Policy - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::SecurityHub::ConfigurationPolicy Policy

An object that defines how Amazon Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

Properties

SecurityHub

The Amazon Web Services service that the configuration policy applies to.

Required: No

Type: SecurityHubPolicy

Update requires: No interruption